This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.mft File: mQYOLer_6n1iLdkVgP-QFfJVdYs.mft (raw, json) Hash identifier: aZS/OlFdX4d8qxjY3mNBFmBFZkvTwswxgMVzgJAa/1o= Subject key identifier: 7A:98:08:C9:33:82:44:DF:7E:FC:D7:AC:F1:A1:34:82:19:61:82:E5 Authority key identifier: 99:06:0E:2D:EA:FF:EA:7D:62:2D:D9:15:80:FF:90:15:F2:55:75:8B Certificate issuer: /CN=99060e2deaffea7d622dd91580ff9015f255758b Certificate serial: 019B2174836855DE885B52710ED4C6708169 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQYOLer_6n1iLdkVgP-QFfJVdYs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.mft Manifest number: 07AC Signing time: Mon 15 Dec 2025 10:00:42 +0000 Manifest this update: Mon 15 Dec 2025 10:00:42 +0000 Manifest next update: Tue 16 Dec 2025 10:00:42 +0000 Files and hashes: 1: YE7z5Yo-VebSsmgIFpnY-X43QgA.roa (hash: lLUNSeL3GzkU1y5/O/u6QldsICYnJuoTtdixE8gdS+A=) 2: mQYOLer_6n1iLdkVgP-QFfJVdYs.crl (hash: ViruEGpmS+6lN00Nx5qvYuvr1PIkRghqEnnhNz9Mx1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.mft rsync://rpki.ripe.net/repository/DEFAULT/mQYOLer_6n1iLdkVgP-QFfJVdYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:74:83:68:55:de:88:5b:52:71:0e:d4:c6:70:81:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99060e2deaffea7d622dd91580ff9015f255758b Validity Not Before: Dec 15 10:00:42 2025 GMT Not After : Dec 16 10:00:42 2025 GMT Subject: CN=7a9808c9338244df7efcd7acf1a13482196182e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6c:9a:15:90:54:cb:eb:5c:63:58:a7:42:c7: be:81:18:1d:82:1b:ac:ee:57:8c:97:a8:c3:5a:75: e8:41:49:57:ea:51:9a:bb:07:6b:57:de:3e:aa:9a: 84:ae:63:3f:c8:f5:33:b3:33:c9:22:48:99:fd:ef: dd:e6:ce:66:81:6b:38:54:11:39:48:7e:17:84:cb: b9:b1:a2:ab:3f:92:74:52:cf:70:33:68:f4:be:63: be:da:c2:4c:f2:82:ce:1c:c1:8c:ee:0c:bb:ef:38: e6:8f:96:30:9a:21:a5:9c:8e:dc:e0:24:c9:7d:ba: 25:0b:f4:c2:86:ce:4a:90:12:7e:eb:8d:68:17:f8: e3:fa:13:12:99:9d:2e:23:5a:af:a5:cc:cb:f1:91: 03:52:38:8d:ac:59:26:f4:6a:9c:7e:20:6c:e7:fb: 89:05:6d:46:53:26:c4:20:6d:af:ba:15:ad:56:db: 36:f8:69:c4:a4:68:3d:9b:8d:aa:e1:5c:6d:7c:ae: a8:65:bc:9d:b8:91:0d:84:f8:36:3a:9f:8c:7a:7e: c8:f5:40:c7:17:89:9b:b5:a5:9f:76:63:69:9e:e5: 7a:21:ce:57:57:8f:c3:54:e6:53:a9:84:58:c4:89: 5c:b7:3d:ec:b0:30:cd:f7:f6:f0:b6:06:b6:c3:ba: 11:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:98:08:C9:33:82:44:DF:7E:FC:D7:AC:F1:A1:34:82:19:61:82:E5 X509v3 Authority Key Identifier: keyid:99:06:0E:2D:EA:FF:EA:7D:62:2D:D9:15:80:FF:90:15:F2:55:75:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQYOLer_6n1iLdkVgP-QFfJVdYs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/98e650-337b-483d-9f4c-a83383059c18/1/mQYOLer_6n1iLdkVgP-QFfJVdYs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:ff:41:75:a4:1a:f5:16:55:94:a4:88:7f:08:b1:7e:1e:99: cf:c2:67:6f:b5:9d:04:22:d5:3e:13:50:66:31:67:dc:22:15: 41:98:4a:69:c1:a2:d1:bc:0a:d8:65:bc:3e:5e:a0:f0:0d:57: d4:f4:32:b8:fa:c6:b1:8d:0d:08:ea:3a:bc:5e:a2:23:8d:f1: d5:a6:e1:a6:50:9a:ae:82:2e:7d:8e:d7:a2:d0:88:3e:e5:43: 90:ba:4b:14:32:23:d6:a9:69:55:8e:9b:15:65:71:68:14:a2: 52:66:57:19:b9:7f:7a:64:51:c4:b7:c9:64:5f:b5:72:c3:df: c5:02:97:c4:ef:e4:59:31:5e:f5:f4:9e:a4:e9:f6:4d:d9:ae: 6c:7b:12:20:5b:7a:09:99:34:3f:98:d0:2b:75:c0:42:61:a8: 3b:1b:d7:3b:4a:91:15:6e:14:11:a7:d9:a4:15:20:fb:f3:58: 77:92:cc:02:6f:f1:5a:cc:0f:aa:a2:79:10:c8:7f:ac:67:d4: 47:82:33:e3:22:25:51:9b:8e:a0:97:27:d0:99:eb:06:d6:44: 0c:11:4f:11:27:39:60:f6:34:01:65:47:86:af:e8:a5:78:e1: 1a:2f:d6:ae:d6:da:7d:dd:b4:12:7c:2a:08:9e:b0:79:2d:98: 01:65:b7:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdINoVd6IW1JxDtTGcIFpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MDYwZTJkZWFmZmVhN2Q2MjJkZDkxNTgwZmY5MDE1ZjI1 NTc1OGIwHhcNMjUxMjE1MTAwMDQyWhcNMjUxMjE2MTAwMDQyWjAzMTEwLwYDVQQD Eyg3YTk4MDhjOTMzODI0NGRmN2VmY2Q3YWNmMWExMzQ4MjE5NjE4MmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmyaFZBUy+tcY1inQse+gRgdghus 7leMl6jDWnXoQUlX6lGauwdrV94+qpqErmM/yPUzszPJIkiZ/e/d5s5mgWs4VBE5 SH4XhMu5saKrP5J0Us9wM2j0vmO+2sJM8oLOHMGM7gy77zjmj5YwmiGlnI7c4CTJ fbolC/TChs5KkBJ+641oF/jj+hMSmZ0uI1qvpczL8ZEDUjiNrFkm9GqcfiBs5/uJ BW1GUybEIG2vuhWtVts2+GnEpGg9m42q4VxtfK6oZbyduJENhPg2Op+Men7I9UDH F4mbtaWfdmNpnuV6Ic5XV4/DVOZTqYRYxIlctz3ssDDN9/bwtga2w7oRWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHqYCMkzgkTffvzXrPGhNIIZYYLlMB8GA1UdIwQY MBaAFJkGDi3q/+p9Yi3ZFYD/kBXyVXWLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVFZT0xlcl82bjFpTGRrVmdQLVFGZkpWZFlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85OGU2NTAtMzM3Yi00ODNkLTlmNGMt YTgzMzgzMDU5YzE4LzEvbVFZT0xlcl82bjFpTGRrVmdQLVFGZkpWZFlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy85OGU2NTAtMzM3Yi00ODNkLTlmNGMtYTgzMzgzMDU5YzE4 LzEvbVFZT0xlcl82bjFpTGRrVmdQLVFGZkpWZFlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/9BdaQa 9RZVlKSIfwixfh6Zz8Jnb7WdBCLVPhNQZjFn3CIVQZhKacGi0bwK2GW8Pl6g8A1X 1PQyuPrGsY0NCOo6vF6iI43x1abhplCaroIufY7XotCIPuVDkLpLFDIj1qlpVY6b FWVxaBSiUmZXGbl/emRRxLfJZF+1csPfxQKXxO/kWTFe9fSepOn2TdmubHsSIFt6 CZk0P5jQK3XAQmGoOxvXO0qRFW4UEafZpBUg+/NYd5LMAm/xWswPqqJ5EMh/rGfU R4Iz4yIlUZuOoJcn0JnrBtZEDBFPESc5YPY0AWVHhq/opXjhGi/Wrtbafd20Enwq CJ6weS2YAWW3qg== -----END CERTIFICATE-----Generated at Mon Dec 15 16:51:11 2025 by rpki-client